A vulnerability classified as problematic has been found in conda constructor up to 3.11.2. Affected is an unknown function of the component Installation Prefix Handler. The manipulation leads to command injection.
This vulnerability is traded as CVE-2025-49823. It is possible to launch the attack on the physical device. There is no exploit available.
It is recommended to upgrade the affected component.
